diff options
| author | Adam Soltys <[email protected]> | 2026-11-06 23:37:49 -0700 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2026-11-06 23:37:49 -0700 |
| commit | 5e315005b72a8e9e6670f10b1d30b532763f7fe6 (patch) | |
| tree | 26682df4d55dee9269d25bb03c5fe395b50de3a8 /android/app/src/main/res/values/strings.xml | |
| parent | 5eb89590b4b7beb681bd619337e58a69fac4b621 (diff) | |
| download | coinosv3-5e315005b72a8e9e6670f10b1d30b532763f7fe6.tar.gz coinosv3-5e315005b72a8e9e6670f10b1d30b532763f7fe6.zip | |
Passkeys in the WebView builds: the apps name v3.coinos.io too, and a failed passkey sign-in no longer goes on to make a new one. Coinos Beta's passkey sign-in failed after the account was picked — "CredMan getCredential call failed … RP ID cannot be validated" (Pixel 9, 2026-11-06). An app's association with a site runs both ways: the site's assetlinks.json names the app (it did), and the app's manifest names the site through asset_statements meta-data — which the TWA has and the webview/fcm manifests didn't. They declare it now, and the shared asset_statements string carries get_login_creds beside handle_all_urls. And passkeyLogin rolled any sign-in failure into creating a passkey, so the validation error was followed by a second, failed create dialog: only NotAllowedError (how browsers report "no passkey here", or a dismissed sheet) leads to creating one now; any other error is shown
Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01VMan6Ts5Tktega8VbLg31q
Diffstat (limited to 'android/app/src/main/res/values/strings.xml')
| -rw-r--r-- | android/app/src/main/res/values/strings.xml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/android/app/src/main/res/values/strings.xml b/android/app/src/main/res/values/strings.xml index 8132a82..77fa055 100644 --- a/android/app/src/main/res/values/strings.xml +++ b/android/app/src/main/res/values/strings.xml @@ -12,7 +12,7 @@ <!-- must match the site's /.well-known/assetlinks.json for URL-bar-less TWA --> <string name="asset_statements"> [{ - \"relation\": [\"delegate_permission/common.handle_all_urls\"], + \"relation\": [\"delegate_permission/common.handle_all_urls\", \"delegate_permission/common.get_login_creds\"], \"target\": { \"namespace\": \"web\", \"site\": \"https://v3.coinos.io\" } }] </string> |